$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab5d94ac-80dc-4cce-b0b9-098f624d6799.roa File: ab5d94ac-80dc-4cce-b0b9-098f624d6799.roa (raw, json) Hash identifier: 7OFTCFwpWegaowcmbfEYC/0r1Va742RDquMW4GyAupg= Subject key identifier: EF:31:62:0A:95:2A:DE:88:2C:4F:69:6E:5A:E7:D1:50:C1:F9:20:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C15F33521E31136210E73C37E19CC372EEB77DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab5d94ac-80dc-4cce-b0b9-098f624d6799.roa Signing time: Sun 19 Oct 2025 14:31:23 +0000 ROA not before: Sun 19 Oct 2025 14:31:23 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:15:f3:35:21:e3:11:36:21:0e:73:c3:7e:19:cc:37:2e:eb:77:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:31:23 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9de964ccac578164a575cc9d3133060438faadb4955801fdbc7900f0a8327b20, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:83:14:af:56:34:48:b6:0e:7b:2d:e3:da: 7e:f6:35:df:bd:18:ad:ad:b9:98:08:63:6c:04:b4: b5:61:c6:0e:0c:42:17:49:4c:3d:2c:ed:f8:97:4b: 1b:0c:6c:a3:01:31:f2:a8:c2:31:c1:cf:f5:a0:b6: 6d:00:6e:66:92:b3:98:e0:94:8b:58:45:79:06:b4: 87:72:33:ca:52:94:e6:e7:4a:97:bb:9d:33:75:6a: a7:52:ae:4d:32:f6:53:34:50:1c:10:82:0f:89:a6: 23:25:3c:b5:8f:ee:95:3f:2f:2f:2d:ac:7b:9b:a4: 88:b7:a7:0f:d7:36:a3:dd:77:d7:30:8c:5a:33:33: c2:44:cf:3d:16:54:a4:c5:69:3d:ca:7d:e4:17:85: cc:81:37:f1:85:4e:b0:97:02:16:eb:da:93:73:ab: 94:0c:83:a0:a0:8a:72:8f:fb:74:8c:6c:4e:92:6b: fe:28:0e:23:a3:d8:96:02:a1:be:1f:a7:1c:af:72: 72:75:1f:61:a4:1d:d5:f8:d0:87:50:66:3f:ae:7b: d6:2d:70:52:ac:5b:30:42:04:02:fc:ed:23:e4:f4: f1:86:16:3c:bc:cb:95:23:89:4f:7d:1a:d4:c7:71: dd:1d:f5:97:44:14:ec:b3:90:f9:c4:15:33:87:8d: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:62:0A:95:2A:DE:88:2C:4F:69:6E:5A:E7:D1:50:C1:F9:20:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab5d94ac-80dc-4cce-b0b9-098f624d6799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.193.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0b:6c:ab:22:94:e8:c7:14:e7:98:71:ed:11:40:a5:a0:0b: 6c:0a:da:ea:33:97:31:4f:6a:21:1c:b8:07:47:74:cc:dd:20: 1f:58:d3:1d:9b:b7:5a:22:7c:a8:3b:42:87:96:9e:35:f3:c4: 3a:0c:77:2f:63:ba:9d:ed:aa:a0:e7:a8:1f:2e:f7:f0:c2:dd: f9:ab:bd:05:0c:e0:c0:fc:fe:ae:68:cc:24:71:df:55:66:e6: 31:9b:df:72:18:65:4e:c8:39:5a:75:1a:ad:f2:fe:f0:48:00: 7d:17:9f:6b:39:a0:5b:4a:7a:41:30:1c:78:a5:8c:44:f8:62: 36:f6:b9:12:47:84:1a:7e:4a:ca:ee:3e:42:91:03:50:b3:72: ce:b5:e6:7c:79:72:c0:9e:67:4c:27:5e:c0:82:3c:4e:ff:0e: b3:3b:74:ea:f4:e5:ec:a6:2b:a2:08:4e:96:3b:93:0a:06:cb: 71:36:29:0a:b1:79:7a:c3:61:ff:4d:f5:3d:e8:8a:12:0f:28: 8e:c6:8a:4f:8b:54:80:d4:26:8e:6f:9c:4b:41:14:84:b9:ca: 27:ea:df:af:f3:31:fa:8a:a8:66:1c:70:b9:b8:e3:1b:4e:b8: 15:8b:4a:d7:90:ec:ea:8f:45:dd:a7:17:82:f5:d4:84:1c:c1: ec:05:b3:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbBXzNSHjETYhDnPDfhnMNy7rd94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzMTIzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGU5NjRjY2FjNTc4MTY0YTU3NWNjOWQzMTMzMDYwNDM4 ZmFhZGI0OTU1ODAxZmRiYzc5MDBmMGE4MzI3YjIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJE4MUr1Y0SLYOey3j2n72Nd+9GK2tuZgIY2wEtLVhxg4M QhdJTD0s7fiXSxsMbKMBMfKowjHBz/Wgtm0AbmaSs5jglItYRXkGtIdyM8pSlObn Spe7nTN1aqdSrk0y9lM0UBwQgg+JpiMlPLWP7pU/Ly8trHubpIi3pw/XNqPdd9cw jFozM8JEzz0WVKTFaT3KfeQXhcyBN/GFTrCXAhbr2pNzq5QMg6CginKP+3SMbE6S a/4oDiOj2JYCob4fpxyvcnJ1H2GkHdX40IdQZj+ue9YtcFKsWzBCBAL87SPk9PGG Fjy8y5UjiU99GtTHcd0d9ZdEFOyzkPnEFTOHjTiVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7zFiCpUq3ogsT2luWufRUMH5ILowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiNWQ5NGFjLTgwZGMtNGNjZS1iMGI5LTA5OGY2MjRkNjc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQMEwDQYJKoZIhvcNAQELBQADggEBAI4LbKsilOjHFOeYce0RQKWgC2wK 2uozlzFPaiEcuAdHdMzdIB9Y0x2bt1oifKg7QoeWnjXzxDoMdy9jup3tqqDnqB8u 9/DC3fmrvQUM4MD8/q5ozCRx31Vm5jGb33IYZU7IOVp1Gq3y/vBIAH0Xn2s5oFtK ekEwHHiljET4Yjb2uRJHhBp+SsruPkKRA1Czcs615nx5csCeZ0wnXsCCPE7/DrM7 dOr05eymK6IITpY7kwoGy3E2KQqxeXrDYf9N9T3oihIPKI7Gik+LVIDUJo5vnEtB FIS5yifq36/zMfqKqGYccLm44xtOuBWLSteQ7OqPRd2nF4L11IQcwewFs7I= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:57 2025 by rpki-client